Other Security Subjects

Hello list,There are more people reporting this problem, but this is my situation:Clients - PIX (PAT) - Cisco SDSL router - InternetInbound TCP connection denied from 80.79.193.22/80 to pix/32686 flags PSH ACKInbound TCP connection denied from 80.79....

What is the ETA for sig for the PCT Bug?Thanks,-wP!

I need to forward a port range to a specific IP. I do not want to create a separate static entry for each port.I am using PAT and I need ports 2300-2400 forwarded to 192.168.5.15I tried writing the command as follows:static (inside,outside) tcp 24.97...

Hey guys,does anyone know if CSA 4.0 on MS cluster is supported?Thanks

Hello, I´m installing a PIX with some users that need connect to another network outside of the LAN, all the Lan use a router how gateway for have access to the internet, they are using proxy, when I connect the PIX how gateway in the PC´S and make...

Does anyone know what RaKrnlNT.SYS is on a windows XP machine ?I keep seeing logs from our IDS system showing that this file is having system calls redirected to it....................i am also seeing similar logs for the following file WNT_FAL.sys.A...

I have an internel and an external sensor. Both sensors are picking up Netsky virus activity from the same external address. My outside sensor is setup to shun those addresses. Should't that prevent any signatures from passing through the firewall?

I am trying to do a couple of things. I am trying to configure Cisco Security Agent so that it will omit blocks on particular items such as Symantec and Microsoft SMS. Is there a way that I can do this? I had a agent on my machine, and I tried to ...

I have just updated to signature 4.1(3)S88. When I run a report in MC it shows some of the signatures at S87 and some at S85. If I check a sensor in configuation settings it also shows a previous signature. When I query the sensor it comes up with...

Hi,I've just captured a correct SNMP packet (trap to port 162) which triggered a Cisco SNMP Message Processing DoS (4513) alarm.My understanding was that only GET or SET packets sent to UDP 162 should trigger the alarm.But this is a TRAP packet, i.e....

From an earlier post I found out that I have a problem setting up HSRP with routers that terminate GRE tunnels. The problem stems from the fact that the HSRP protocol uses a virtual IP that each of the members of an HSRP group use. I have an idea t...

Following cisco command references, crypto access-list should be configured in a mirrored way on both VPN endpoints. E.g.:VPN_GW_1:access-list 100 permit host 172.16.1.1 host 172.16.2.1VPN_GW_2:access-list 100 permit host 172.16.2.1 host 172.16.1.1Is...

One of the functions of our PIX 525 is to permit internet access for our users. This PIX does not have direct access to the Internet, it relays upstream to another device that does.Immediately after upgrading to 6.3(3) our syslog server began report...

Hi !We have a Proxy firewall Cluster on the inside Interface of the PIX. FW1 172.16.0.1FW2 172.16.0.2Cluster Address 172.16.0.25What i would like to do now, is to have the pix translate all the traffic from 172.16.0.1 to xxx.xxx.xxx.114 and also from...

I have a PIX firewall (details below) that I am trying to upgrade for 3DES support. When I try to obtain the free upgrade key, I receive a failover only key (PIX TYPE: PIX-515-FO). Am I being stupid, as I only have one firewall and I have not been us...